From stephen.farrell@cs.tcd.ie Tue Dec 6 07:26:59 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A1F521F8BCB for ; Tue, 6 Dec 2011 07:26:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.705 X-Spam-Level: X-Spam-Status: No, score=-98.705 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FB_WORD2_END_DOLLAR=3.294, J_CHICKENPOX_63=0.6, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LftlQ6jHa8q5 for ; Tue, 6 Dec 2011 07:26:55 -0800 (PST) Received: from scss.tcd.ie (hermes.cs.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id D3BC721F8BCD for ; Tue, 6 Dec 2011 07:26:54 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id 6C9C9153C28; Tue, 6 Dec 2011 15:26:50 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:in-reply-to:references :subject:mime-version:user-agent:from:date:message-id:received :received:x-virus-scanned; s=cs; t=1323185205; bh=M/YYQfEWCBYniY pdvT+IZe9VNEdHa3eTYwdBIlzahNQ=; b=lbCIMlR09d2Z2jDvHkqx5gVXN2tFuy U2ezIz3AbGwcsEDnA8KZLo/oOlY5nfwDtf6KYqCqZHRLOgAPzpi/drOmIHH/MH/I FJa9ZNbUOl+8b6iiZwg18UNm8z5Jb3EC7dmHffDeKWE3cKVZ0FAYJR1BdU36oLmt Q1yMIHmUnf0HPhFbDF9G7A2f0K2Nr5w7K+W/yka9PFafEjiWC+jEezcS4tqxUZzh GoBwCSyb2I2Uv+YY7bO8cGd+VlHxOeLGDErSA5jxCXEAEQX5hFXNJPjHC0dBajD0 5c59mcbqneJK15x0nXp5K+pzPVS2SHUTiaUFHvgiPX5eUEMq4aCTqOKQ== X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id 9DVFbYRQGwnI; Tue, 6 Dec 2011 15:26:45 +0000 (GMT) Received: from [10.10.10.233] (natair.sics.se [193.10.67.36]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id 9FB7E153C27; Tue, 6 Dec 2011 15:26:43 +0000 (GMT) Message-ID: <4EDE3431.6050403@cs.tcd.ie> Date: Tue, 06 Dec 2011 15:26:41 +0000 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:8.0) Gecko/20111105 Thunderbird/8.0 MIME-Version: 1.0 To: ietf-ssh@NetBSD.org, saag@ietf.org References: <4ECA6E4D.3030101@fifthhorseman.net> <98237.1322028405@eng-mail01.juniper.net> <4ECCADE5.30708@cs.tcd.ie> In-Reply-To: <4ECCADE5.30708@cs.tcd.ie> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Cc: "openssh-unix-dev@mindrot.org" Subject: Re: [saag] ssh-keygen -r should support SSHFP records for ECDSA (or at least return non-zero error code on failure) X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Dec 2011 15:26:59 -0000 FYI - IETF last call for this has just gone out. [1] Please comment on ietf@ietf.org if there are issues that need to be raised. Thanks, Stephen. [1] http://www.ietf.org/mail-archive/web/ietf-announce/current/msg09643.html On 11/23/2011 08:25 AM, Stephen Farrell wrote: > > Thanks Mark, > > Yes, I'm happy to AD sponsor. No one objected when I asked > before and it seems quite reasonable. > > Ondřej - I'll start an IETF LC since there only seem to be > typos to be fixed. > > Cheers, > S. > > On 11/23/2011 06:06 AM, Mark D. Baushke wrote: >> Hi Daniel, >> >> Daniel Kahn Gillmor writes: >> >>> hi folks: >>> >>> it looks like ssh-keygen -r can't export SSHFP records for ECDSA keys: >>> >>> 0 dkg@pip:/tmp/cdtemp.oiRYAS$ ssh-keygen -f foobar -t ecdsa -q -P '' >>> 0 dkg@pip:/tmp/cdtemp.oiRYAS$ ssh-keygen -r foobar -f foobar.pub >>> export_dns_rr: unsupported algorithm >>> 0 dkg@pip:/tmp/cdtemp.oiRYAS$ >>> >>> the first number in my prompt is the return code of the last command; >>> note that ssh-keygen -r fails to produce an SSHFP DNS RR, but it >>> returns 0. >>> >>> at the least, it should return non-zero on failure. >>> >>> >>> I note that the relevant RFC doesn't include an enumeration for ECDSA: >>> >>> https://tools.ietf.org/html/rfc4255#section-3.1.1 >>> >>> Could anyone on this list kick off the IETF process for allocating a new >>> ID in that registry for ECDSA? I'm not currently involved in the IETF's >>> Network Working Group so i don't really know the political landscape >>> there. >> >> I believe that the SSH development community will need to support this >> effort: >> >> http://tools.ietf.org/html/draft-os-ietf-sshfp-ecdsa-sha2-00 >> >> which specifies values for both the ECDSA algorithm and a SHA-256 >> fingerprint algorithm. >> >> RFC 4255 enumerates the RSA and DSS algorithms and the SHA-1 fingerprint >> type. >> >> draft-os-ietf-sshfp-ecdsa-sha2-00 authored by O. Sury has a typo in the >> draft suggesting that they update RFC 4225 which is wrong, but it seems >> to be a simple typo as the body of the draft referecnes RFC 4255. >> >> However, it does add ECDSA to the SSHFP RR types and SHA-256 to the >> fingerprint types. >> >> The draft expires on Dec 18, 2011. >> >> This draft was sent to saag@ietf.org and the author also wrote a patch >> for OpenSSH (portable) in >> >> https://git.nic.cz/redmine/projects/ietf/repository/revisions/master/entry/ssh-sshfp-ecdsa.patch >> >> >> See the message thread here: >> >> http://www.ietf.org/mail-archive/web/saag/current/msg03326.html >> http://www.ietf.org/mail-archive/web/saag/current/msg03327.html >> >> Stephen Farrell says that the author is >> asking the AD to sponsor the work. And Warren Kumari >> has added his support. >> >> This seems like something that should be raised on the >> ietf-ssh@NetBSD.org list with a CC to saag@ietf.org, so >> I have added these to lists to my response to this message. >> >> For the record, my vote is +1 for this draft. >> >> -- Mark >> _______________________________________________ >> saag mailing list >> saag@ietf.org >> https://www.ietf.org/mailman/listinfo/saag >> > _______________________________________________ > saag mailing list > saag@ietf.org > https://www.ietf.org/mailman/listinfo/saag From stephen.farrell@cs.tcd.ie Fri Dec 9 07:35:53 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 30EAE21F86A1 for ; Fri, 9 Dec 2011 07:35:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.537 X-Spam-Level: X-Spam-Status: No, score=-102.537 tagged_above=-999 required=5 tests=[AWL=0.062, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CJRF5htaaH8d for ; Fri, 9 Dec 2011 07:35:52 -0800 (PST) Received: from scss.tcd.ie (hermes.cs.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id 880DC21F86A5 for ; Fri, 9 Dec 2011 07:35:52 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id C4B36157594 for ; Fri, 9 Dec 2011 15:35:51 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:subject:mime-version :user-agent:from:date:message-id:received:received: x-virus-scanned; s=cs; t=1323444951; bh=IxHICWsfx6TNeCaiQtNQMnPB UD8UJjwDNSzw0UKNuOY=; b=LOb+fHbQQsyZV+/ZBpyuE3H6ErEHCh8vu1LsQO0u MZX8cL1zTdjt8KYaNdH2zZDoK2FwFHn2XnquN4Aq59kAmSrfkfPaijjtL7M/w4IQ R5mVb6u6M0SBF/CeyCasVlFcK/cQ0/r5y5pZvVwjcw3deF2AQ0KbeLhkInNTt49O lMehmAhsS78bOPCzmsS5E8DJiAjW1IWEtDjrWemPfILWTP+Ie5ZxMrshU02sFLAu XN4cHN25pJAvnCqm4wwKJI0yryLY201474A6n21LfAooVEBseWUFynQkcmpboJBV Qzgo2NkIIiAO0+bAZh7SAppJQbUJZzh5PLw2d8GqZBUTrA== X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id 4qBXwKC+jGdA for ; Fri, 9 Dec 2011 15:35:51 +0000 (GMT) Received: from [10.87.48.3] (unknown [86.42.29.40]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id 6DD8F1539C5 for ; Fri, 9 Dec 2011 15:35:51 +0000 (GMT) Message-ID: <4EE22AD7.9010806@cs.tcd.ie> Date: Fri, 09 Dec 2011 15:35:51 +0000 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:8.0) Gecko/20111105 Thunderbird/8.0 MIME-Version: 1.0 To: "saag@ietf.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [saag] anyone got good text or a pointer... X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Dec 2011 15:35:53 -0000 A discuss I raised recently says: "...all messages that contain URLs that the other party might de-reference SHOULD come with a health warning - they can be abused in various ways. 12.4 doesn't really cover that and would seem like a fine place to warn about blindly following URLs. Can't think of an RFC with good text for that right now, but I'd say there might be one if you poke about." Anyone got any (pointer to) good text about how to be careful about de-referencing URLs in general? Thanks S. From sm@resistor.net Fri Dec 9 08:23:01 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 386DE21F8508 for ; Fri, 9 Dec 2011 08:23:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eHjW2yb1qX-x for ; Fri, 9 Dec 2011 08:22:57 -0800 (PST) Received: from mx.ipv6.elandsys.com (mx.ipv6.elandsys.com [IPv6:2001:470:f329:1::1]) by ietfa.amsl.com (Postfix) with ESMTP id A3C1321F84B8 for ; Fri, 9 Dec 2011 08:22:57 -0800 (PST) Received: from SUBMAN.resistor.net (IDENT:sm@localhost [127.0.0.1]) by mx.elandsys.com (8.14.4/8.14.5) with ESMTP id pB9GMpQw016170 for ; Fri, 9 Dec 2011 08:22:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=opendkim.org; s=mail2010; t=1323447776; bh=NEgnTdARyrwftY7BpWOhnGQcwvpRslrzFuRy584QU7U=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=hPIF5TkCLDHUd+p0y7qm1bolVLFNjl+H180Gy1tn4PqMHJQ00DrYCctviRw3rxyFv VRGluF0LVxFgB3KvUc8kx4NWsrBRvrIzLTb9+aSmhULyWthCAf0UmP+D/FlwLFdjdK CQmCz0dONT5qg/hg27p3RRHoaDUb4fiXQmF6k8yk= DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=resistor.net; s=mail; t=1323447776; bh=NEgnTdARyrwftY7BpWOhnGQcwvpRslrzFuRy584QU7U=; h=Message-Id:Date:To:From:Subject:In-Reply-To:References: Mime-Version:Content-Type:Cc; b=s8fOud5/cDGNZLWP3gOvLDrjszeVf+31hlwyOlPkAymUsMU18xrnhnwdhIJmFQUkm CGqiTyJLheI63U/xe8gaCSWsf3g/B41SdId/oOgE/ulxa+yEjnjsWkRNvPQHnNsGBx o0/WxEIP2THNeuJYi44Y6jNx+tt5qnOhSRJkbHC8= Message-Id: <6.2.5.6.2.20111209080654.0aabf1a0@resistor.net> X-Mailer: QUALCOMM Windows Eudora Version 6.2.5.6 Date: Fri, 09 Dec 2011 08:16:11 -0800 To: saag@ietf.org From: SM In-Reply-To: <4EE22AD7.9010806@cs.tcd.ie> References: <4EE22AD7.9010806@cs.tcd.ie> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Subject: Re: [saag] anyone got good text or a pointer... X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Dec 2011 16:23:02 -0000 At 07:35 09-12-2011, Stephen Farrell wrote: >A discuss I raised recently says: > >"...all messages that contain URLs that the other >party might de-reference SHOULD come with a health warning - they >can be abused in various ways. 12.4 doesn't really cover that and >would seem like a fine place to warn about blindly following URLs. >Can't think of an RFC with good text for that right now, but I'd >say there might be one if you poke about." Some of the text from the Security Considerations section of RFC 3986 could be reused. Regards, -sm From stephen.farrell@cs.tcd.ie Fri Dec 16 09:14:53 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 876B021F8A67 for ; Fri, 16 Dec 2011 09:14:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C4WI4Wiendv6 for ; Fri, 16 Dec 2011 09:14:52 -0800 (PST) Received: from scss.tcd.ie (hermes.cs.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id 7DED021F8AD9 for ; Fri, 16 Dec 2011 09:14:52 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id 7429B171C70 for ; Fri, 16 Dec 2011 17:14:51 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:subject:mime-version :user-agent:from:date:message-id:received:received: x-virus-scanned; s=cs; t=1324055691; bh=j2mxojlWZ6jKUi+rFzj+pW9j TVGwBSdtLbHjM5rBGrQ=; b=3v3sqZYN7RiOmA+6ylF0GJfLRiVt26dRw0HwXMBO OeCxlaCyPUfV4foKB9IwJvqsmYbHnvaPjUSSyeczVPfE7z41T3EzZykCre7jqbFY 6wtCNaofAX8kyp7iBSIdGlikm25uwzj5jbH1aGGwaSHJgEJskSOFtFgBBHAk31S6 1aINtdx/PuC5Uu0mqyTxMxmB+3pWUTyCbnI7Yx+kLbGbodEABJaq8JbW5f11tB4I iNwR/rw+QD51st9lKoKevXu8/pVOkFSnialRDnNCKIs3nopZb8UyMJ49yQB/q34u ajDd97uPYJFyZdiO7SQoJJfIQ5AO89wopvuS0n78j1dQRA== X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id 47vg6cn1OyEC for ; Fri, 16 Dec 2011 17:14:51 +0000 (GMT) Received: from [IPv6:2001:770:10:203:a288:b4ff:fe9c:bc5c] (unknown [IPv6:2001:770:10:203:a288:b4ff:fe9c:bc5c]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id 23C46171C07 for ; Fri, 16 Dec 2011 17:14:51 +0000 (GMT) Message-ID: <4EEB7C81.3010300@cs.tcd.ie> Date: Fri, 16 Dec 2011 17:14:41 +0000 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:8.0) Gecko/20111105 Thunderbird/8.0 MIME-Version: 1.0 To: "saag@ietf.org" Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: [saag] Minutes from Taipei saag session... X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Dec 2011 17:14:53 -0000 Hi all, I've (almost belatedly:-) posted the minutes from the Taipei saag session. [1] Please post any corrections/additions to the list before Jan 4th. Cheers, S. [1] http://www.ietf.org/proceedings/82/minutes/saag.txt From jiangsheng@huawei.com Mon Dec 19 19:29:12 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1DFB21F84DB for ; Mon, 19 Dec 2011 19:29:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fa8vNT929I62 for ; Mon, 19 Dec 2011 19:29:12 -0800 (PST) Received: from szxga01-in.huawei.com (szxga01-in.huawei.com [119.145.14.64]) by ietfa.amsl.com (Postfix) with ESMTP id 22FA721F84A4 for ; Mon, 19 Dec 2011 19:29:12 -0800 (PST) Received: from huawei.com (szxga05-in [172.24.2.49]) by szxga05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LWH007WVGBCYG@szxga05-in.huawei.com> for saag@ietf.org; Tue, 20 Dec 2011 11:28:25 +0800 (CST) Received: from szxrg02-dlp.huawei.com ([172.24.2.119]) by szxga05-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LWH001SPGBC86@szxga05-in.huawei.com> for saag@ietf.org; Tue, 20 Dec 2011 11:28:24 +0800 (CST) Received: from szxeml205-edg.china.huawei.com ([172.24.2.119]) by szxrg02-dlp.huawei.com (MOS 4.1.9-GA) with ESMTP id AFU65184; Tue, 20 Dec 2011 11:28:24 +0800 Received: from SZXEML421-HUB.china.huawei.com (10.82.67.160) by szxeml205-edg.china.huawei.com (172.24.2.57) with Microsoft SMTP Server (TLS) id 14.1.323.3; Tue, 20 Dec 2011 11:28:22 +0800 Received: from SZXEML506-MBX.china.huawei.com ([169.254.4.239]) by szxeml421-hub.china.huawei.com ([10.82.67.160]) with mapi id 14.01.0323.003; Tue, 20 Dec 2011 11:28:18 +0800 Date: Tue, 20 Dec 2011 03:28:17 +0000 From: Sheng Jiang X-Originating-IP: [10.108.4.58] To: "saag@ietf.org" Message-id: <5D36713D8A4E7348A7E10DF7437A4B9218583D0F@SZXEML506-MBX.china.huawei.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-language: zh-CN Content-transfer-encoding: 7BIT Accept-Language: en-GB, zh-CN, en-US Thread-topic: Review Request for Secure DHCPv6 draft Thread-index: Acy+x2gGN3HO4h0SQnaoLYayaAyNrw== X-MS-Has-Attach: X-MS-TNEF-Correlator: x-cr-hashedpuzzle: CfV6 Douy EDiD FWuf FtV4 G6Ce HRAA JVUH MoZj NYwu OzWn PSFi Qdcc UBwP VwYG WDix; 2; ZABoAGMALQBjAGgAYQBpAHIAcwBAAHQAbwBvAGwAcwAuAGkAZQB0AGYALgBvAHIAZwA7AHMAYQBhAGcAQABpAGUAdABmAC4AbwByAGcA; Sosha1_v1; 7; {079D8402-5F02-427B-AD2F-FC36A5570A80}; agBpAGEAbgBnAHMAaABlAG4AZwBAAGgAdQBhAHcAZQBpAC4AYwBvAG0A; Tue, 20 Dec 2011 03:28:14 GMT; UgBlAHYAaQBlAHcAIABSAGUAcQB1AGUAcwB0ACAAZgBvAHIAIABTAGUAYwB1AHIAZQAgAEQASABDAFAAdgA2ACAAZAByAGEAZgB0AA== x-cr-puzzleid: {079D8402-5F02-427B-AD2F-FC36A5570A80} X-CFilter-Loop: Reflected X-Mailman-Approved-At: Tue, 27 Dec 2011 11:10:31 -0800 Cc: dhc Chairs Subject: [saag] Review Request for Secure DHCPv6 draft X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Dec 2011 03:29:13 -0000 Hi, security experts, The Secure DHCPv6 draft is nearly reaching DHC WGLC stage. Since it is heavily secure relevant, we would like to get your review comments before WGLC. Could you please spare some time to read and comment? Many thanks and best regards, Sheng From jiangsheng@huawei.com Mon Dec 19 22:06:15 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2264521F858D for ; Mon, 19 Dec 2011 22:06:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0qaguIbl2ySb for ; Mon, 19 Dec 2011 22:06:14 -0800 (PST) Received: from szxga03-in.huawei.com (szxga03-in.huawei.com [119.145.14.66]) by ietfa.amsl.com (Postfix) with ESMTP id 0CC7621F8586 for ; Mon, 19 Dec 2011 22:06:09 -0800 (PST) Received: from huawei.com (szxga03-in [172.24.2.9]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LWH00ITFNLG8X@szxga03-in.huawei.com> for saag@ietf.org; Tue, 20 Dec 2011 14:05:40 +0800 (CST) Received: from szxrg01-dlp.huawei.com ([172.24.2.119]) by szxga03-in.huawei.com (iPlanet Messaging Server 5.2 HotFix 2.14 (built Aug 8 2006)) with ESMTP id <0LWH00KSHNKB3M@szxga03-in.huawei.com> for saag@ietf.org; Tue, 20 Dec 2011 14:05:40 +0800 (CST) Received: from szxeml207-edg.china.huawei.com ([172.24.2.119]) by szxrg01-dlp.huawei.com (MOS 4.1.9-GA) with ESMTP id AFX52438; Tue, 20 Dec 2011 14:05:35 +0800 Received: from SZXEML416-HUB.china.huawei.com (10.82.67.155) by szxeml207-edg.china.huawei.com (172.24.2.59) with Microsoft SMTP Server (TLS) id 14.1.323.3; Tue, 20 Dec 2011 14:05:32 +0800 Received: from SZXEML506-MBX.china.huawei.com ([169.254.4.239]) by szxeml416-hub.china.huawei.com ([10.82.67.155]) with mapi id 14.01.0323.003; Tue, 20 Dec 2011 14:05:34 +0800 Date: Tue, 20 Dec 2011 06:05:33 +0000 From: Sheng Jiang X-Originating-IP: [10.108.4.58] To: "saag@ietf.org" Message-id: <5D36713D8A4E7348A7E10DF7437A4B9218583D6C@SZXEML506-MBX.china.huawei.com> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-language: zh-CN Content-transfer-encoding: 7BIT Accept-Language: en-GB, zh-CN, en-US Thread-topic: Review Request for Secure DHCPv6 draft Thread-index: Acy+x2gGN3HO4h0SQnaoLYayaAyNrwAFc8Bg X-MS-Has-Attach: X-MS-TNEF-Correlator: X-CFilter-Loop: Reflected X-Mailman-Approved-At: Tue, 27 Dec 2011 11:10:31 -0800 Cc: dhc Chairs Subject: Re: [saag] Review Request for Secure DHCPv6 draft X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Dec 2011 06:06:15 -0000 Link for the document: http://tools.ietf.org/html/draft-ietf-dhc-secure-dhcpv6 > -----Original Message----- > From: Sheng Jiang > Sent: Tuesday, December 20, 2011 11:28 AM > To: 'saag@ietf.org' > Cc: dhc Chairs > Subject: Review Request for Secure DHCPv6 draft > > Hi, security experts, > > The Secure DHCPv6 draft is nearly reaching DHC WGLC stage. Since it is > heavily secure relevant, we would like to get your review comments > before WGLC. Could you please spare some time to read and comment? > > Many thanks and best regards, > > Sheng From turners@ieca.com Tue Dec 27 14:00:03 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 690CF21F889A for ; Tue, 27 Dec 2011 14:00:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.686 X-Spam-Level: X-Spam-Status: No, score=-100.686 tagged_above=-999 required=5 tests=[AWL=-0.835, BAYES_40=-0.185, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zZJDIdlpP0Ff for ; Tue, 27 Dec 2011 14:00:03 -0800 (PST) Received: from gateway01.websitewelcome.com (gateway01.websitewelcome.com [67.18.81.19]) by ietfa.amsl.com (Postfix) with ESMTP id E51D321F85CE for ; Tue, 27 Dec 2011 13:59:58 -0800 (PST) Received: by gateway01.websitewelcome.com (Postfix, from userid 5007) id B6549248E20B2; Tue, 27 Dec 2011 15:59:57 -0600 (CST) Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway01.websitewelcome.com (Postfix) with ESMTP id AB7DD248E2079 for ; Tue, 27 Dec 2011 15:59:57 -0600 (CST) Received: from [71.191.4.217] (port=33221 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from ) id 1Rff3t-0000ZX-Ft for saag@ietf.org; Tue, 27 Dec 2011 15:59:57 -0600 Message-ID: <4EFA3FDC.8070107@ieca.com> Date: Tue, 27 Dec 2011 16:59:56 -0500 From: Sean Turner User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:9.0) Gecko/20111222 Thunderbird/9.0.1 MIME-Version: 1.0 To: saag@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator1743.hostgator.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: pool-71-191-4-217.washdc.east.verizon.net (thunderfish.local) [71.191.4.217]:33221 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 14 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20= Subject: [saag] SAAG Session Slot X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Dec 2011 22:00:03 -0000 In Taipei, we pushed the SAAG session to be in a later slot (the 2nd session after lunch on Thursday) from where it had been for a long time (the 1st slot after lunch on Thursday). Stephen and I want to push the SAAG session back to the last slot on Thursday (3rd slot after lunch on Thursday). Are there any violent objections? spt From hannes.tschofenig@nsn.com Wed Dec 28 00:29:23 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1224221F8906 for ; Wed, 28 Dec 2011 00:29:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -106.401 X-Spam-Level: X-Spam-Status: No, score=-106.401 tagged_above=-999 required=5 tests=[AWL=0.199, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AMG+1tCyywD3 for ; Wed, 28 Dec 2011 00:29:22 -0800 (PST) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) by ietfa.amsl.com (Postfix) with ESMTP id C820521F8A4B for ; Wed, 28 Dec 2011 00:29:20 -0800 (PST) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id pBS8TEq6023479 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 28 Dec 2011 09:29:14 +0100 Received: from demuexc024.nsn-intra.net (demuexc024.nsn-intra.net [10.159.32.11]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id pBS8TEVI027773; Wed, 28 Dec 2011 09:29:14 +0100 Received: from FIESEXC035.nsn-intra.net ([10.159.0.25]) by demuexc024.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.4675); Wed, 28 Dec 2011 09:29:14 +0100 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 28 Dec 2011 10:31:03 +0200 Message-ID: <999913AB42CC9341B05A99BBF358718DECDD1E@FIESEXC035.nsn-intra.net> In-Reply-To: <5D36713D8A4E7348A7E10DF7437A4B9218583D0F@SZXEML506-MBX.china.huawei.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [saag] Review Request for Secure DHCPv6 draft Thread-Index: Acy+x2gGN3HO4h0SQnaoLYayaAyNrwGcz/IA References: <5D36713D8A4E7348A7E10DF7437A4B9218583D0F@SZXEML506-MBX.china.huawei.com> From: "Tschofenig, Hannes (NSN - FI/Espoo)" To: "ext Sheng Jiang" , X-OriginalArrivalTime: 28 Dec 2011 08:29:14.0756 (UTC) FILETIME=[C8624440:01CCC53A] Cc: dhc Chairs Subject: Re: [saag] Review Request for Secure DHCPv6 draft X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Dec 2011 08:29:23 -0000 Hi Sheng,=20 I am not sure which document you are talking about.=20 http://tools.ietf.org/html/draft-ietf-dhc-secure-dhcpv6-03 is expired and http://datatracker.ietf.org/doc/draft-ietf-dhc-cga-config-dhcpv6 itself seems to depend on other specifications but the references don't make sense - many of the references that are listed under the normative section should rather be informative and vice versa. ciao Hannes=20 > -----Original Message----- > From: saag-bounces@ietf.org [mailto:saag-bounces@ietf.org] On Behalf Of > ext Sheng Jiang > Sent: Tuesday, December 20, 2011 5:28 AM > To: saag@ietf.org > Cc: dhc Chairs > Subject: [saag] Review Request for Secure DHCPv6 draft >=20 > Hi, security experts, >=20 > The Secure DHCPv6 draft is nearly reaching DHC WGLC stage. Since it is > heavily secure relevant, we would like to get your review comments > before WGLC. Could you please spare some time to read and comment? >=20 > Many thanks and best regards, >=20 > Sheng > _______________________________________________ > saag mailing list > saag@ietf.org > https://www.ietf.org/mailman/listinfo/saag From barryleiba.mailing.lists@gmail.com Wed Dec 28 16:17:12 2011 Return-Path: X-Original-To: saag@ietfa.amsl.com Delivered-To: saag@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A7D921F8442 for ; Wed, 28 Dec 2011 16:17:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.508 X-Spam-Level: X-Spam-Status: No, score=-102.508 tagged_above=-999 required=5 tests=[AWL=0.469, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nlP-f0i3dPIn for ; Wed, 28 Dec 2011 16:17:11 -0800 (PST) Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id 7D48721F8445 for ; Wed, 28 Dec 2011 16:17:11 -0800 (PST) Received: by yenm7 with SMTP id m7so8325583yen.31 for ; Wed, 28 Dec 2011 16:17:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=Wkn2O7GtPvswcW43W2da7qZS2/Vxv19O35WyZotOShA=; b=D9ux80AWidVGV+a4bBbDQhbCK3/PPFuW45R3D3N3/nSGaNic4A4dkt+U66nFDqdbG9 6d+zjjjdi5FOj0wIYaJ1JJE73rEzjsJlkaMxkc+SMZl5DbRezj7pzbtO5v/41TS114yR w+Y3Gt2P4eq0blFt2GagNd0Qm0+kz7pR4MBxs= MIME-Version: 1.0 Received: by 10.236.200.230 with SMTP id z66mr46274451yhn.20.1325117831097; Wed, 28 Dec 2011 16:17:11 -0800 (PST) Sender: barryleiba.mailing.lists@gmail.com Received: by 10.146.225.26 with HTTP; Wed, 28 Dec 2011 16:17:11 -0800 (PST) In-Reply-To: <4EFA3FDC.8070107@ieca.com> References: <4EFA3FDC.8070107@ieca.com> Date: Wed, 28 Dec 2011 19:17:11 -0500 X-Google-Sender-Auth: w0loGqiVJRabZYtiyCBsQEDmPoc Message-ID: From: Barry Leiba To: Sean Turner Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: saag@ietf.org Subject: Re: [saag] SAAG Session Slot X-BeenThere: saag@ietf.org X-Mailman-Version: 2.1.12 Precedence: list List-Id: Security Area Advisory Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Dec 2011 00:17:12 -0000 > Stephen and I want to push the SAAG session > back to the last slot on Thursday (3rd slot after lunch on Thursday). =A0= Are > there any violent objections? I think it's a fine idea. Barry